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Disposition of Claims 

4) ^3 Claim(s) 1^9 is/are pending in the application. 

4a) Of the above claim(s) 2-4 is/are withdrawn from consideration. 
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DETAILED ACTION 
Response to Amendment 

1 . This action is in response to the communication dated May 15, 2006 with the 
amendments to claims 1, 5, 8 and 9 and the cancellation of claims 2-4. 

2. Claims 1 and 5-9 are pending. 

Response to Arguments 

3. Applicant's arguments filed My 15, 2006 have been fully considered but they are 
not persuasive. In response to applicant's arguments against the references individually, 
one cannot show nonobviousness by attacking references individually where the 
rejections are based on combinations of references. See In re Keller, 642 F.2d 413, 
208 USPQ 871 (CCPA 1981); In re Merck & Co., 800 F.2d 1091, 231 USPQ 375 (Fed. 
Cir. 1986). 

The applicant argues that Simmons does not teach the transaction server 
checking a file attribute of the requested data to determine whether the requested data 
is encrypted (on page 4, Remarks), Pardikar is relied on for the teaching of this 
limitation (paragraph [0061]). The applicant argues Simmons does not teach the 
transaction server encrypting the data with the public key when the data is not 
encrypted and the transaction server sending the encrypted data to the player/receiver. 
The examiner contends that the transaction server and the content provider could 
function as one entity to fulfill user's request of data (paragraph [0037]), therefore the 
content provider could automatically encrypt the requested file using player/receiver's 
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key and sends the encrypted file to the player/receiver. The applicant argues Pardikar 
does not teach the server encrypting the data with the public encryption key when the 
data is not encrypted. The examiner maintains that Pardikar is relied on for the teaching 
of checking a file attribute of the requested data using the network server to determine 
whether the requested data is encrypted, moreover paragraphs 74-75 reflects another 
aspect of the invention, it does not mean that the server can not encrypt data. And 
lastly, Schneier is relied on for the teaching of public and privated encryption key where 
the data is encrypted with public key and decrypted with private key which is also well- 
known in the data encryption art. 



Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5. Claims 1, 5 and 8 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Simmons et al. (2001/0039659) in view of Pardikar et al. (2003/0046366) and 
further in view of Schneier (Applied cryptography). 

a) As to claim 1 , Simmons discloses a system and method for enabling a 
user to request and download selected files from provider sites (Abstract) comprising: 
receiving a request for data at a network server from client computer system (page 1 , 
paragraph 0006, i.e. home user requests media file from server); automatically retrieve 
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using the network server a key from the client computer system, encrypting the 
unencrypted data with the key automatically and without user intervention and sending 
the encrypted data to the client computer system (page 1, paragraph 0016; page 3, 
paragraph 0041 and page 4, paragraph 0046). 

Simmons does not explicitly disclose checking a file attribute to determine that 
the file is to be encrypted with the public encryption key. 

Pardikar discloses a system and method for providing transparent and automatic 
file access comprising checking a file attribute to determine that the file is to be 
encrypted (page 6, paragraph 0061). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to employ the use of checking a file attribute to determine that the file is to be 
encrypted in the system of Simmons as Pardikar teaches so as to provide security of 
those files that are determined to be protected. 

Simmons discloses encryption keys however he does not explicitly disclose 
public and private encryption key where the data file is encrypted with public key. 

Schneier discloses public key algorithm where often the encryption key is called 
the public key and the decryption key is called private key (pages 4-5). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to employ the use of public key algorithm in the system of Simmons and 
Pardikar as Schneier teaches so as to efficiently encrypt data files. 

b) As to claims 5 and 8, Simmons discloses a system and method for 
enabling a user to request and download selected files from provider sites (Abstract) 
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comprising: receiving a request for a data file from a client computer system (page 1, 
paragraph 0006, i.e. home user requests media file from server); automatically retrieve 
the key from client computer system, encrypting the data file with the key automatically 
and without user intervention and sending the encrypted data file to the client computer 
system (page 1, paragraph 0016; page 3, paragraph 0041 and page 4, paragraph 0046) 
and storing the encrypted data file on a storage medium in the client computer system 
(Fig. 8, element 210). 

Simmons does not explicitly disclose checking a file attribute of the requested 
data file. 

Pardikar discloses a system and method for providing transparent and automatic 
file access comprising checking a file attribute of the requested data file (page 6, 
paragraph 0061). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to employ the use of checking a file attribute to determine that the file is to be 
encrypted in the system of Simmons as Pardikar teaches so as to provide security of 
those files that are determined to be protected. 

Simmons discloses encryption keys however he does not explicitly disclose 
public and private encryption key where the data file is encrypted with public key. 

Schneier discloses public key algorithm where often the encryption key is called 
the public key and the decryption key is called private key (pages 4-5). 
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It would have been obvious to one of ordinary skill in the art at the time of the 
invention to employ the use of public key algorithm in the system of Simmons and 
Pardikar as Schneier teaches so as to efficiently encrypt data files. 

6. Claims 6 and 9 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Simmons et al. (2001/0039659) in view of Pardikar et al. (2003/0046366) in view of 
Schneier (Applied cryptography) and further in view of Prihoda et al. (6,789,195). 

As to method of claim 6 and data storage medium of claim 9, Simmons, Pardikar 
and Schneier do not explicitly disclose an attribute (associated with the file) indicating 
the file is unencrypted when stored on the network server. 

Prihoda discloses the data are encrypted while being transmitted between the 
client and server, the data then exist in unencrypted form at the central point and are 
generally stored in unencrypted form in a central database (col. 1, lines 22-27). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to employ the use of attribute to indicate file is unencrypted when stored on 
the server as Prihoda teaches in the system of Simmons, Pardikar and Schneier so as 
to provide adequate protection to data. 

7. Claim 7 is rejected under 35 U.S.C. 103(a) as being unpatentable over Simmons 
et al. (2001/0039659) in view of Pardikar et al. (2003/0046366) in view of Schneier 
(Applied cryptography) and further in view of Eldridge et al. (6,094,721). 
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Simmons, Pardikar and Schneier do not explicitly disclose the public and private 
key are based on a password. 

Elridge discloses a method and apparatus for updating the password status of 
one of more servers in a client/server environment comprising public and corresponding 
private key derived from password (col. 5, lines 33-46). 

It would have been obvious to one of ordinary skill in the art at the time of the 
invention to employ the use of generating public and private key from a password as 
Elridge teaches in the system of Simmons, Pardikar and Schneier so as to secure 
password access. 

Conclusion 

8. Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
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the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

9. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Minh Dieu Nguyen whose telephone number is 571-272- 



If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on 571-272-3865. The fax phone number 
for the organization where this application or proceeding is assigned is (571) 273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov . Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 
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